Sign me up Login

Details about package oidc-agent

Name: oidc-agent (PTS)
Uploader: Marcus Hardt <marcus@hardt-it.de> (Debian QA page)
Description: oidc-agent-cli - Commandline tool for obtaining OpenID Connect Access tokens on the commandline
liboidc-agent5 - oidc-agent library
liboidc-agent-dev - oidc-agent library development files
oidc-agent-desktop - oidc-agent desktop integration
oidc-agent - Commandline tools for obtaining OpenID Connect Access tokens

Package uploads

Upload #7

Information

Version: 5.2.3-1
Uploaded: 2025-04-30 11:15
Source package: oidc-agent_5.2.3-1.dsc
Distribution: unstable
Section: misc
Priority: optional
Homepage: https://github.com/indigo-dc/oidc-agent/
Vcs-Git: https://salsa.debian.org/debian/oidc-agent.git
Vcs-Browser: https://salsa.debian.org/debian/oidc-agent

Changelog

 oidc-agent (5.2.3-1) unstable; urgency=medium
 .
   * New upstream version 5.2.3
   * Bump version of BuildRequire libwebkit2gtk-4.1-dev

QA information

Comments

No comments

Upload #6

Information

Version: 5.2.3-1
Uploaded: 2025-04-29 09:41
Source package: oidc-agent_5.2.3-1.dsc
Distribution: unstable
Section: misc
Priority: optional
Homepage: https://github.com/indigo-dc/oidc-agent/
Vcs-Git: https://salsa.debian.org/debian/oidc-agent.git
Vcs-Browser: https://salsa.debian.org/debian/oidc-agent

Changelog

 oidc-agent (5.2.3-1) unstable; urgency=medium
 .
   * New upstream version 5.2.3
   * Bump version of BuildRequire libwebkit2gtk-4.1-dev

QA information

Comments

  1. Marcus,

One of this morning command lines.

sbuild --extra-package=libmustach-core1_1.2.10-1_amd64.deb --extra-package=libclibs-list-dev_0.4.1-1_amd64.deb --extra-package=libclibs-list0_0.4.1-1_amd64.deb --extra-package=libmustach-core-dev_1.2.10-1_amd64.deb --extra-package=libmustach-cjson1_1.2.10-1_amd64.deb --extra-package=libmustach-cjson-dev_1.2.10-1_amd64.deb --extra-package=libclibs-list-dev_0.4.1-1_amd64.deb -d unstable oidc-agent_5.2.3-1.dsc

:-)

Running lintian...
N:
W: oidc-agent source: patch-file-present-but-not-mentioned-in-series [debian/patches/remove_cJSON]
N: 
N:   The specified patch is present under the debian/patches directory but is
N:   not mentioned in any "series" or "00list" file.
N:   
N:   This may mean that a patch was created with the intention of modifying the
N:   package but is not being applied.
N:   
N:   Please either add the filename to the series file, or ensure it is
N:   commented-out in a form that Lintian can recognise, for example:
N:   
N:     0001_fix-foo.patch
N:     # 0002_fix-bar.patch
N: 
N:   Visibility: warning
N:   Show-Always: no
N:   Check: debian/patches/quilt
N: 
N:
W: oidc-agent source: patch-file-present-but-not-mentioned-in-series [debian/patches/remove_liblist]
N:
W: oidc-agent source: patch-file-present-but-not-mentioned-in-series [debian/patches/remove_mustache]
N:
W: oidc-agent-cli: possibly-insecure-handling-of-tmp-files-in-maintainer-script /tmp [postinst:16]
N: 
N:   The named maintainer script appears to access a file or a directory in
N:   /tmp or a similar folder for temporary data. Working directly in such
N:   folders, which are usually world-writable, can easily lead to serious
N:   security or privacy bugs.
N:   
N:   Please consider using the mktemp utility from the coreutils package when
N:   creating temporary files or directories.
N: 
N:   Please refer to Scripts (Section 10.4) in the Debian Policy Manual for
N:   details.
N: 
N:   Visibility: warning
N:   Show-Always: no
N:   Check: maintainer-scripts/temporary-files
N: 
N:
W: oidc-agent-cli: possibly-insecure-handling-of-tmp-files-in-maintainer-script /tmp [postinst:23]
N:
W: oidc-agent-cli: possibly-insecure-handling-of-tmp-files-in-maintainer-script /tmp [postinst:24]
N:
W: oidc-agent-cli: possibly-insecure-handling-of-tmp-files-in-maintainer-script /tmp [postinst:25]
N:
W: oidc-agent-cli: possibly-insecure-handling-of-tmp-files-in-maintainer-script /tmp [postinst:32]
N:
W: oidc-agent-cli: possibly-insecure-handling-of-tmp-files-in-maintainer-script /tmp [postinst:36]
N:
W: oidc-agent-cli: possibly-insecure-handling-of-tmp-files-in-maintainer-script /tmp [postinst:37]
N:
I: oidc-agent source: patch-not-forwarded-upstream [debian/patches/remove_cJSON]
N: 
N:   According to the DEP-3 headers, this patch has not been forwarded
N:   upstream.
N:   
N:   Please forward the patch and try to have it included in upstream's version
N:   control system. If the patch is not suitable for that, please mention
N:   not-needed in the Forwarded field of the patch header.
N: 
N:   Please refer to social contract item 2, Coordination with upstream
N:   developers (Section 3.1.4) in the Debian Developer's Reference, Changes to
N:   the upstream sources (Section 4.3) in the Debian Policy Manual, and
N:   Bug#755153 for details.
N: 
N:   Visibility: info
N:   Show-Always: no
N:   Check: debian/patches/dep3
N:   Renamed from: send-patch
N: 
N:
I: oidc-agent source: patch-not-forwarded-upstream [debian/patches/remove_liblist]
N:
I: oidc-agent source: patch-not-forwarded-upstream [debian/patches/remove_mustache]

E: Lintian run failed (policy violation)

Regards

Phil
    Phil Wyett at April 30, 2025, 6:08 a.m. 
  2. Marcus,

'debian/copyright' initial checking.

philwyett@ks-tarkin:~/Development/builder/debian/oidc-agent-5.2.3$ lrc
en: Versions: licenserecon '4.2'  licensecheck '3.3.9-1'

Parsing Source Tree  ....
Reading d/copyright  ....
  Missing Files: Paragraph for debian/
Running licensecheck ....

d/copyright      | licensecheck

MIT-License      | Expat             lib/cJSON/cJSON.c
MIT-License      | Expat             lib/cJSON/cJSON.h
MIT-License      | ISC               lib/mustache/LICENSE.txt
MIT-License      | ISC               lib/mustache/mustach.c
MIT-License      | ISC               lib/mustache/mustach-cjson.c
MIT-License      | ISC               lib/mustache/mustach-cjson.h
MIT-License      | ISC               lib/mustache/mustach.h
MIT-License      | ISC               lib/mustache/mustach-wrap.c
MIT-License      | ISC               lib/mustache/mustach-wrap.h
MIT-License      | Expat             LICENSE
MIT              | Expat             src/oidc-prompt/webview.h
MIT-License      | Apache-2.0        src/utils/file_io/safefile/safe_id_range_list.c
MIT-License      | Apache-2.0        src/utils/file_io/safefile/safe_id_range_list.h
MIT-License      | Apache-2.0        src/utils/file_io/safefile/safe_is_path_trusted.c
MIT-License      | Apache-2.0        src/utils/file_io/safefile/safe_is_path_trusted.h
MIT-License      | BSD-2-clause      src/utils/string/strptime.c

Regards

Phil
    Needs work Phil Wyett at April 30, 2025, 6:11 a.m. 
  3. Thanks for the sbuild cmdline.

I did not manage to override this lintian warning: 
'W: oidc-agent-cli: possibly-insecure-handling-of-tmp-files-in-maintainer-script /tmp [postinst:37]'

I used this entry (copied from systemd-package) in 'debian/source/lintian-overrides', but no luck so far:
'oidc-agent: possibly-insecure-handling-of-tmp-files-in-maintainer-script /tmp [postinst:*]
'
    Needs work Marcus Hardt at April 30, 2025, 11:08 a.m.

Upload #5

Information

Version: 5.2.3-1
Uploaded: 2025-04-28 15:26
Source package: oidc-agent_5.2.3-1.dsc
Distribution: unstable
Section: misc
Priority: optional
Homepage: https://github.com/indigo-dc/oidc-agent/
Vcs-Git: https://salsa.debian.org/debian/oidc-agent.git
Vcs-Browser: https://salsa.debian.org/debian/oidc-agent

Changelog

 oidc-agent (5.2.3-1) unstable; urgency=medium
 .
   * New upstream version 5.2.3

QA information

Comments

  1. The following packages have unmet dependencies:
 sbuild-build-depends-main-dummy : Depends: libwebkit2gtk-4.0-dev (>= 2.34) but it is not installable
                                   Depends: libmustach-cjson-dev (>= 1.2.10) but it is not installable
                                   Depends: libclibs-list-dev (>= 0.4) but it is not installable
E: Unable to correct problems, you have held broken packages.
E: The following information from --solver 3.0 may provide additional context:
   Unable to satisfy dependencies. Reached two conflicting decisions:
   1. sbuild-build-depends-main-dummy:amd64=0.invalid.0 is selected for install
   2. sbuild-build-depends-main-dummy:amd64 Depends libwebkit2gtk-4.0-dev (>= 2.34)
      but none of the choices are installable:
      [no choices]
apt-get failed.
E: Package installation failed
    Needs work Phil Wyett at April 28, 2025, 6:38 p.m. 
  2. I have packaged these dependencies, but they are not yet part of debian:
https://mentors.debian.net/package/mustach/
  (BuidRequires https://mentors.debian.net/package/mustache-spec/)
https://mentors.debian.net/package/simple.css/
https://mentors.debian.net/package/clibs-list/
    Ready Marcus Hardt at April 29, 2025, 8:58 a.m. 
  3. Hi ,

Can you fix the 'libwebkit2gtk-4.0-dev' 'Builds-Depends', we are now at 'libwebkit2gtk-4.1-dev' with same API.

Regards

Phil
    Phil Wyett at April 29, 2025, 9:06 a.m. 
  4. Done
    Ready Marcus Hardt at April 29, 2025, 11:43 a.m.

Upload #4

Information

Version: 5.2.3-1
Uploaded: 2025-04-23 09:26
Source package: oidc-agent_5.2.3-1.dsc
Distribution: unstable
Section: misc
Priority: optional
Homepage: https://github.com/indigo-dc/oidc-agent/
Vcs-Git: https://salsa.debian.org/debian/oidc-agent.git
Vcs-Browser: https://salsa.debian.org/debian/oidc-agent

Changelog

 oidc-agent (5.2.3-1) unstable; urgency=medium
 .
   * New upstream version 5.2.3

QA information

Comments

  1. There's no need to delete the embedded copies via d/patches/remove_* as long as the package is built against the packages versions of those.
    Jakob Haufe at April 24, 2025, 3:11 p.m.

Upload #3

Information

Version: 5.2.3-1
Uploaded: 2025-04-23 09:11
Source package: oidc-agent_5.2.3-1.dsc
Distribution: unstable
Section: misc
Priority: optional
Homepage: https://github.com/indigo-dc/oidc-agent/
Vcs-Git: https://salsa.debian.org/debian/oidc-agent.git
Vcs-Browser: https://salsa.debian.org/debian/oidc-agent

Changelog

 oidc-agent (5.2.3-1) unstable; urgency=medium
 .
   * New upstream version 5.2.3

QA information

Comments

No comments

Upload #2

Information

Version: 5.2.3-1
Uploaded: 2025-04-23 08:26
Source package: oidc-agent_5.2.3-1.dsc
Distribution: unstable
Section: misc
Priority: optional
Homepage: https://github.com/indigo-dc/oidc-agent/
Vcs-Git: https://salsa.debian.org/debian/oidc-agent.git
Vcs-Browser: https://salsa.debian.org/debian/oidc-agent

Changelog

 oidc-agent (5.2.3-1) unstable; urgency=medium
 .
   * New upstream version 5.2.3

QA information

Comments

No comments

Upload #1

Information

Version: 5.2.3-1
Uploaded: 2025-04-22 13:11
Source package: oidc-agent_5.2.3-1.dsc
Distribution: unstable
Section: misc
Priority: optional
Homepage: https://github.com/indigo-dc/oidc-agent/
Vcs-Git: https://salsa.debian.org/debian/oidc-agent.git
Vcs-Browser: https://salsa.debian.org/debian/oidc-agent

Changelog

 oidc-agent (5.2.3-1) unstable; urgency=medium
 .
   * New upstream version 5.2.3

QA information

Comments

No comments